RE: Storing passwords in database as one way hash

[Dave Watts]

> But if it's a one way hash, why do you need to store it, you 
> can't decrypt it. What is the purpose?

The purpose of using a one-way hash is to allow password comparisons without
actually sending the password itself over the network. Whenever you hash a
specific password, you get the same hash result. So, if I hash my password,
then send you the hash, and you store it, you can later compare it to
another hash of the same password. If they match, the password is obviously
the same.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
------------------------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists or send a message 
with 'unsubscribe' in the body to [EMAIL PROTECTED]